Apparently, he removed the IP block from his side, but ingress requests are still filtered and the instance itself is still in MRF reject list. Whatever; I would've returned some custom code to stop him from hammering pleromer with repeated fetch requests, but nginx caching takes care of that already.